DETECTING COMPROMISED BALLOTS 


ABSTRACT OF THE DISCLOSURE 


A facility for discerning corruption of an electronic ballot is described. The 
facility sends from a first computer system to a second computer system an 
encrypted ballot that reflects a ballot choice selected by a voter. The facility then 
sends a confirmation from the second computer system to the first computer 
system, which serves to convey the decrypted contents of the encrypted ballot as 
received at the second computer system, and which is generated without 
decrypting the encrypted ballot. In the first computer system, the facility uses the 
confirmation to determine whether the decrypted contents of the encrypted ballot 
as received at the second computer system match the ballot choice selected by 
the voter. 
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